CVE

Id
39525  
CVE No.
CVE-2009-2090  
Status
Candidate  
Description
Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors.  
Phase
Assigned (20090616)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
435097 39525 CVE-2009-2090 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27014463  View
435098 39525 CVE-2009-2090 AIXAPAR:PK86328  View
435099 39525 CVE-2009-2090 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK86328  View
435100 39525 CVE-2009-2090 BID:36153  View
435101 39525 CVE-2009-2090 URL:http://www.securityfocus.com/bid/36153  View
435102 39525 CVE-2009-2090 SECUNIA:34461  View
435103 39525 CVE-2009-2090 URL:http://secunia.com/advisories/34461  View
435104 39525 CVE-2009-2090 XF:was-wsadmin-security-bypass(52082)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43735 JVNDB-2009-004742 IBM WebSphere Commerce における重要な情報を取得される脆弱性 IBM WebSphere Commerce には、トレースが有効になっている際、重要な情報を取得される脆弱性が存在します。 CVE-2009-2094 39525 1.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004742.html  View